“What data is being transmitted and what data is being used really depends on the device,” Verdi said. “They can offload that information from the device to servers on the internet that are either controlled by the companies or third parties and there’s some processing that can happen there.”

“I think it’s really time for folks at the federal level to be thinking about comprehensive, baseline, common sense privacy law,” he said.